II. AMENDMENTS TO THE CLAIMS 

The following listing of claims replaces all prior versions, and listings, of claims in the 
application: 

1 . (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of: 

providing a business process; 

identifying risks in the business process as control points; and 
arranging information pertaining to the control points in a standard format using a 
separate template for each control point and storing the template in a computer database to 
provide subsequent access to the template, wherein the information comprises a set of tests to be 
performed by a test entity, and wherein the set of tests identify an occurrence of the risks in the 
business process. 

2. (Original) The method of claim 1, further comprising the steps of: 

identifying actions to address the risks; 

arranging the identified actions in the template; and 

performing an audit using the template. 

3. (Cancelled). 
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4. (Previously presented) The method of claim 1, wherein the step of arranging information 
further comprises a set of actions, wherein the set of actions address the occurrence of the risks. 

5. (Previously presented) The method of claim 4, wherein the step of arranging_information 
further comprises: 

a business process; 

an action entity, wherein the action entity performs the set of actions; and 
audit details. 

6. (Previously presented) The method of claim 5, wherein the step of arranging information 
further comprises: 

a control point name; 
control point revisions; 
background information; and 
a control point frequency. 

7. (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of: 

providing a business process; 

implementing a set of tests to be performed by a test entity to identify an occurrence of 
the risks in the business process as control points; 

identifying a set of actions to address the identified occurrence of the risks; and 
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arranging the set of tests and the identified actions in a standard format using a separate 
template for each control point , and storing the template in a computer database to provide 
subsequent access to the template. 

8. (Previously presented) The method of claim 7, wherein the step of implementing the set of 
tests and the set of actions comprise control point information. 

9. (Previously presented) The method of claim 7, further comprising the step of accessing 
the stored template to perform an audit. 

10. (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of: 

providing a business process; 

implementing a set of tests to be performed by a test entity to identify an occurrence of 
the risks in the business process as control points; 

identifying a set of actions to address the identified occurrence of the risks; 

arranging the business process, the set of tests, and the identified actions in a standard 
format using a separate template for each control point , and storing the template in a computer 
database to provide subsequent access to the template; and 

auditing the control points based on the template. 



11. (Original) The method of claim 10, wherein the implementing step comprises the step of 
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examining steps in the business process to identify risks. 

12. (Currently amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of: 

arranging a set of tests to be performed by a test entity in a test field, wherein the set of 
tests identifies an occurrence of a risk in the business process;-and 

arranging a set of actions in an action field, wherein the set of actions addresses the 
identified occurrence of a ris k; and 

wherein the template corresponds to a single control point . 

13. (Original) The method of claim 12, further comprising the steps of: 

arranging a business process in a business process field; 

arranging a test entity in a test execution field, wherein the test entity performs the set of 

tests; 

arranging an action entity in an action execution field, wherein the action entity performs 
the set of actions; and 

arranging audit details in an audit field. 

14. (Original) The method of claim 13, further comprising: 

arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
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arranging a control point frequency in an interval field. 

15. (Previously presented) The method of claim 12, further comprising the step of performing 
an audit based on the stored template. 

16. (Currently amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of: 

arranging a business process in a business process field; 

arranging a set of tests to be performed by a test entity in a test field, wherein the set of 
tests identifies an occurrence of a risk in the business process; and 

arranging a set of actions in an action field, wherein the set of actions addresses the 
identified occurrence of a ris k; and 

wherein the template corresponds to a single control point . 

17. (Previously presented) The method of claim 16, further comprising the steps of: 

arranging a test entity in a test execution field, wherein the test entity performs the set of 

tests; 

arranging an action entity in an action execution field, wherein the action entity performs 
the set of actions; and 

arranging audit details in an audit field; 

storing the template in a computer database to provide subsequent access to the template; 

and 
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performing an audit based on the stored template. 

18. (Original) The method of claim 17, further comprising: 

arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
arranging a control point frequency in an interval field. 

19. (Currently amended) A computer implemented template for arranging business process 
control point information, comprising: 

a test field for arranging a set of tests to be performed by a test entity, wherein the set of 
tests identifies an occurrence of a risk in a business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified occurrence of a ris k; and 

wherein the template corresponds to a single control point . 

20. (Previously presented) The computer implemented template of claim 19, further 
comprising: 

a business process field for arranging a business process; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 
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an action execution field for arranging an action entity, wherein the action entity 
performs the set of actions; and 

an audit field for arranging audit details. 

21 . (Previously presented) The computer implemented_template of claim 20, further 
comprising: 

a name field for arranging a control point name; 

a revision field for arranging control point revisions; 

an information field for arranging background information; and 

an interval field for arranging a control point frequency. 

22. (Previously presented) The computer implemented template of claim 19, wherein the risks 
comprise control points, and wherein the set of tests and the set of actions comprise control point 
information. 

23. (Currently amended) A computer implemented template for arranging business process 
control point information, comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests to be performed by a test entity, wherein the set of 
tests identifies an occurrence of a risk in the business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified occurrence of a ris k; and 
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wherein the template corresponds to a single control point . 



24. (Previously presented) The computer implemented template of claim 23, further 
comprising: 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the action entity 
performs the set of actions; and 

an audit field for arranging audit details. 

25. (Previously presented) The computer implemented template of claim 24, further 
comprising: 

a name field for arranging a control point name; 

a revision field for arranging control point revisions; 

an information field for arranging background information; and 

an interval field for arranging a control point frequency. 

26. (Currently amended) A computer implemented template for arranging business process 
control point information, comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests to be performed by a test entity, wherein the set of 
tests identifies an occurrence of a risk in the business process steps; 
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an action field for arranging a set of actions, wherein the set of actions addresses the 
identified risks; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the action entity 
performs the set of actions; and 

an audit field for arranging audit details ; and 

wherein the template corresponds to a single control point . 

27. (Previously presented) The computer implemented template of claim 26, further 
comprising: 

a name field for arranging a control point name; 

a revision history field for arranging control point revisions, wherein the revision history 
field includes fields for arranging a revision number, a revision date, a summary of changes, and 
changes marked; 

an information access field for arranging background information, wherein the 
information access field includes at least one hypertext link that allows direct access to the 
background information; and 

an interval field for arranging a control point frequency. 



28. (Currently amended) A program product stored on a recordable medium for arranging 
business process control point information in a template, comprising: 
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an interface for receiving business process control point information; 
a separate template for each control point for arranging the received information, wherein 
the template comprises: 

a test field for arranging a set of tests to be performed by a test entity, wherein the 
set of tests identifies an occurrence of a risk in a business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses 
the occurrence of the identified risk. 

29. (Original) The program product of claim 28, wherein the template further comprises: 

a business process field for arranging a business process; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging action entities, wherein the action entity performs 
the set of actions; and 

an audit field for arranging audit details. 

30. (Previously presented) The program product of claim 29, wherein the template further 
comprises: 

a name field for arranging a control point name; 

a revision history field for arranging control point revisions, wherein the revision history 
field includes fields for arranging a revision number, a revision date, a summary of changes, and 
changes marked; 
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an information access field for arranging background information, wherein the 
information access field includes at least one hypertext link that allows direct access to 
background information; and 

an interval field for arranging a control point frequency. 
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